Follow-up r90482: escape some more wikitext

diff --git a/includes/FileDeleteForm.php b/includes/FileDeleteForm.php
index 854005b..54c19f0 100644 (file)
--- a/includes/FileDeleteForm.php
+++ b/includes/FileDeleteForm.php
@@ -253,7 +253,7 @@ class FileDeleteForm {
                        return wfMsgExt(
                                "{$message}-old", # To ensure grep will find them: 'filedelete-intro-old', 'filedelete-nofile-old', 'filedelete-success-old'
                                'parse',
-                               $this->title->getText(),
+                               wfEscapeWikiText( $this->title->getText() ),
                                $wgLang->date( $this->getTimestamp(), true ),
                                $wgLang->time( $this->getTimestamp(), true ),
                                wfExpandUrl( $this->file->getArchiveUrl( $this->oldimage ) ) );
@@ -261,7 +261,7 @@ class FileDeleteForm {
                        return wfMsgExt(
                                $message,
                                'parse',
-                               $this->title->getText()
+                               wfEscapeWikiText( $this->title->getText() )
                        );
                }
        }

diff --git a/includes/specials/SpecialUserlogin.php b/includes/specials/SpecialUserlogin.php
index 12f4f28..e16e00f 100644 (file)
--- a/includes/specials/SpecialUserlogin.php
+++ b/includes/specials/SpecialUserlogin.php
@@ -831,7 +831,7 @@ class LoginForm extends SpecialPage {
 
                $wgOut->setPageTitle( wfMsg( 'loginsuccesstitle' ) );
                if( $msgname ){
-                       $wgOut->addWikiMsg( $msgname, $wgUser->getName() );
+                       $wgOut->addWikiMsg( $msgname, wfEscapeWikiText( $wgUser->getName() ) );
                }
                
                $wgOut->addHTML( $injected_html );